CVE-2009-2407
4.5 Medium
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.6%
Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a large encrypted key size in a Tag 3 packet.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f151cd2c54ddc7714e2f740681350476cda03a28
lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html
risesecurity.org/advisories/RISE-2009003.txt
secunia.com/advisories/35985
secunia.com/advisories/36045
secunia.com/advisories/36051
secunia.com/advisories/36054
secunia.com/advisories/36116
secunia.com/advisories/36131
secunia.com/advisories/37471
www.debian.org/security/2009/dsa-1844
www.debian.org/security/2009/dsa-1845
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4
www.redhat.com/support/errata/RHSA-2009-1193.html
www.securityfocus.com/archive/1/505337/100/0/threaded
www.securityfocus.com/archive/1/507985/100/0/threaded
www.securityfocus.com/bid/35850
www.ubuntu.com/usn/usn-807-1
www.vmware.com/security/advisories/VMSA-2009-0016.html
www.vupen.com/english/advisories/2009/2041
www.vupen.com/english/advisories/2009/3316
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11255
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8057
www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html
www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html
Social References
More
Related
4.5 Medium
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.6%